note 15691 deleted from features.file-upload by irc-html
| From: | irc-html@php.net | Date: | Sat, 19 Jan 2002 20:35:58 +0000 |
| Subject: | note 15691 deleted from features.file-upload by irc-html | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-25374@lists.php.net to get a copy of this message | ||
Take care to set the correct ownership of the php-tempdir when operating in safe-mode. If you use
Apache and PHP as a module, you can set upload_tmp_dir to /tmp/php for example and then chown the
directory /tmp/php to the user Apache runs under (wwwrun, nobody, etc - depends on
installation/distribution). Then make the directory read&writable. Works very fine here!
By the way, do I need to verify an uploaded file via 'is_uploaded_file', when I have
'register_globals' switched off and I use the name provided by 'tmp_name'? This
name should always point to a file in the tempdir, right? Or can this be tricked?